Users can now reset password after receiving a token from the admin